[wp-trac] [WordPress Trac] #44724: KSES: Allow 'download' attribute for links

WordPress Trac noreply at wordpress.org
Wed Oct 24 01:18:41 UTC 2018


#44724: KSES: Allow 'download' attribute for links
--------------------------------------+------------------------
 Reporter:  SergeyBiryukov            |       Owner:  chriscct7
     Type:  enhancement               |      Status:  accepted
 Priority:  normal                    |   Milestone:  5.0
Component:  Formatting                |     Version:
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:
--------------------------------------+------------------------

Comment (by pento):

 In [changeset:"43813" 43813]:
 {{{
 #!CommitTicketReference repository="" revision="43813"
 KSES: Allow the `download` attribute on `<a>` tags.

 To avoid this being a vector for bypassing the filetypes that are allowed
 to be uploaded, this attribute is only allowed to be added without a
 value.

 Props kalpshit, arshidkv12, welcher, peterwilsoncc, marina_wp, pento.
 See #44724.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44724#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list